Self Host Blocks - Building blocks for self-hosting with best practices

kiara · March 16, 2026, 3:55am

how many PRs for an initial implementation can we get?
well, here’s a fourth!

github.com/NixOS/nixpkgs

contracts RFC - alternate implementation using generated options

master ← KiaraGrouwstra:contracts-secret-generated

opened 03:53AM - 16 Mar 26 UTC

KiaraGrouwstra

+620 -55

This is a PR for contracts (https://github.com/NixOS/rfcs/pull/189), using a `fi…leSecrets` contracts as an example. This iteration is similar to the earlier: - #432529: like that PR made for a somewhat clean API, but the current PR addresses its docs build failure by avoiding `config` use within types - #485453: the conceptual basis for the current PR, tho the current one reconstructs options to make for a cleaner API - #495303: similarly limited to `fileSecrets`, and built on top of by the current PR to address its duplication Feedback welcome! ## Things done - Built on platform: - [x] x86_64-linux - [ ] aarch64-linux - [ ] x86_64-darwin - [ ] aarch64-darwin - Tested, as applicable: - [x] [NixOS tests] in [nixos/tests]. - [ ] [Package tests] at `passthru.tests`. - [x] Tests in [lib/tests] or [pkgs/test] for functions and "core" functionality. - [ ] Ran `nixpkgs-review` on this PR. See [nixpkgs-review usage]. - [ ] Tested basic functionality of all binary files, usually in `./result/bin/`. - Nixpkgs Release Notes - [ ] Package update: when the change is major or breaking. - NixOS Release Notes - [ ] Module addition: when adding a new NixOS module. - [ ] Module update: when the change is significant. - [ ] Fits [CONTRIBUTING.md], [pkgs/README.md], [maintainers/README.md] and other READMEs. [NixOS tests]: https://nixos.org/manual/nixos/unstable/index.html#sec-nixos-tests [Package tests]: https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#package-tests [nixpkgs-review usage]: https://github.com/Mic92/nixpkgs-review#usage [CONTRIBUTING.md]: https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md [lib/tests]: https://github.com/NixOS/nixpkgs/blob/master/lib/tests [maintainers/README.md]: https://github.com/NixOS/nixpkgs/blob/master/maintainers/README.md [nixos/tests]: https://github.com/NixOS/nixpkgs/blob/master/nixos/tests [pkgs/README.md]: https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md [pkgs/test]: https://github.com/NixOS/nixpkgs/blob/master/pkgs/test